Products: 1
    Vulnerabilities: 26
    Known Exploited: 0
    1
    Critical Level Threats
    11
    High Level Threats
    13
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-51144

    Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=add_message', pvmsg.php?action=confirm_delete , and ajax.server.php?page=user&action=flip_follow endpoints in Ampache <= 6.6.0.

    Last Modified: Apr 15, 2026
    Published: Mar 05, 2025

    CVE-2024-51484

    Insufficient Validation in Controllers (Activation/Deactivation) in Ampache

    Last Modified: Nov 14, 2024
    Published: Nov 11, 2024

    CVE-2024-51485

    Insufficient Validation in Plugins (Activation/Deactivation) in Ampache

    Last Modified: Nov 14, 2024
    Published: Nov 11, 2024

    CVE-2024-51486

    Stored Cross-Site Scripting in Ampache

    Last Modified: Nov 21, 2024
    Published: Nov 11, 2024

    CVE-2024-51487

    Insufficient Validation in Catalog (Activation/Deactivation) in Ampache

    Last Modified: Nov 14, 2024
    Published: Nov 11, 2024
    Items Per Page